What happens to your information after you verify
A clear explanation of who sees your verification data, how it's stored, and how to delete it if you want to.
Written By Catherine Weir
Last updated About 3 hours ago
Privacy matters. Here's a straight answer about what happens to the information you share during identity verification.
Who can see your verification data
Three parties have visibility into your verification:
You — through your Stripe account or by request
365 Agents — we see your verification status, images, and extracted data (name, date of birth, ID number) so we can register your messaging and confirm your identity on our end
Stripe — processes and stores the data as both our verification provider and as an independent data controller, with their own privacy commitments and legal obligations
Nobody else has access. Your verification data is not shared with advertisers, data brokers, or other customers of 365 Agents or Stripe.
How long your data is kept
Non-biometric data (photo of your ID, extracted fields like name and ID number) — retained for up to 3 years in your business's Stripe Dashboard. You can request earlier deletion at any time.
Biometric identifiers (the mathematical representation of your face, used to match your selfie against your ID) — retained by Stripe for up to 1 year, to help detect fraud across attempts. You can opt out of biometric retention at any time by contacting Stripe at [email protected]
Countries with specific deletion laws — in places like Germany, ID card data is deleted automatically after verification completes, even without a deletion request.
How it's protected
All data encrypted end-to-end in transit and at rest
Stripe is certified to SOC 2, PCI DSS, and ISO 27001 standards
365 Agents maintains SOC 2 Type II attestation
Documents are never sent or requested over email
How to request deletion
To delete data held by 365 Agents: contact support, and we'll use Stripe's deletion endpoint to remove your verification images and extracted data from our dashboard
To delete biometric data or data Stripe holds as an independent controller: email [email protected]
Your legal rights
Residents of California, the European Union, the United Kingdom, Brazil, and many other jurisdictions have specific legal rights regarding identity data
You can access, correct, or request deletion of your data in accordance with applicable privacy laws
365 Agents processes this data as required to provide you with our service. Stripe is both our processor and an independent controller with its own privacy commitments. See stripe.com/privacy for their full policy.